Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f6623b1a-6e5d-353d-9516-9cf47b0abeab.roa
File:                     f6623b1a-6e5d-353d-9516-9cf47b0abeab.roa (raw, json)
Hash identifier:          WJWDs3QRiV2DiNdRiCZ0Qqy2ohxQIEYYWmhekBO9g3Q=
Subject key identifier:   18:D5:B2:91:6F:15:C8:A2:DF:7E:38:12:D1:C6:32:D6:7F:1E:43:E7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BC863FBA0070B873EF580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f6623b1a-6e5d-353d-9516-9cf47b0abeab.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        35.230.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:c8:63:fb:a0:07:0b:87:3e:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=7d866a0d-9663-411d-a255-06f115174371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e8:52:88:37:72:7e:01:f6:8d:e7:be:e0:ac:
                    ef:a2:df:6b:8b:a8:7b:79:7c:bc:8d:52:4f:5f:3e:
                    2a:39:8c:bc:66:f0:d2:ec:a4:ed:d7:9c:5b:66:54:
                    17:23:7c:c2:aa:6d:64:be:0a:be:a0:c1:8f:57:93:
                    69:0e:7f:67:61:5a:a5:e6:45:63:de:43:e7:57:94:
                    a7:9b:1d:25:8c:e6:99:ce:72:50:cd:21:40:69:4b:
                    4b:d7:67:53:9c:02:a1:b8:01:55:67:1d:48:df:9a:
                    01:9d:7f:c3:19:de:7f:1a:40:62:c5:2f:fa:00:85:
                    e8:75:cf:ed:9a:22:da:f5:4f:68:66:af:38:20:73:
                    44:35:6a:c0:e2:02:10:03:ad:8b:08:fa:d8:0f:6e:
                    be:3d:af:c6:35:73:b9:e3:76:8f:dd:49:88:17:ba:
                    a4:3b:1f:b7:5f:a1:9d:05:4c:59:13:7c:54:3c:c9:
                    bc:4f:dd:98:ba:c6:03:53:e5:30:c4:8c:14:91:b5:
                    6c:95:b2:cd:40:56:37:ad:0a:91:e6:6f:16:c5:92:
                    6e:98:68:41:4d:7b:d7:f4:a1:41:38:4f:4d:af:f6:
                    d6:61:d1:13:09:84:1c:bd:c2:07:12:a0:65:ae:ba:
                    4d:dc:00:89:59:07:d4:04:45:92:6a:f9:e9:ff:fe:
                    d0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D5:B2:91:6F:15:C8:A2:DF:7E:38:12:D1:C6:32:D6:7F:1E:43:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f6623b1a-6e5d-353d-9516-9cf47b0abeab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.230.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:58:f7:57:ef:7e:ce:7d:e7:83:da:03:52:cb:a3:3c:f6:ae:
         b0:0a:de:93:9a:d4:1a:7b:05:23:94:bb:f3:c3:31:b3:8c:b1:
         6e:08:68:3c:c3:88:4d:8a:5c:10:76:43:4f:1a:22:11:3a:f8:
         5d:6a:97:8e:45:0b:e5:2f:e2:05:4f:b0:76:fa:90:3d:d4:9b:
         16:7f:0b:c2:78:1b:00:9a:e7:ec:ec:5d:07:94:b7:f2:d1:2c:
         ca:2f:93:9a:f2:e5:e4:de:2c:ba:be:5b:35:35:59:2d:70:a7:
         89:cd:f3:87:1f:a2:9a:e0:ab:bc:cd:60:a0:a5:8e:b1:90:a3:
         6b:08:a9:79:31:e0:a0:ef:cd:41:d9:eb:cc:03:7d:26:1e:c0:
         ff:44:31:62:40:b6:0a:3a:64:76:c3:56:a4:70:95:cc:ba:e2:
         0f:2a:8d:be:33:cd:19:0f:23:5c:9d:36:7e:9c:bf:da:15:8c:
         1f:46:3b:82:27:b5:e8:7e:2c:00:cc:c8:94:66:73:c8:21:b3:
         a7:ad:24:82:27:ad:df:ba:29:ec:3c:3c:0e:9b:e6:7b:1c:b4:
         43:1c:e4:57:db:67:d6:20:b0:f6:05:03:d5:aa:b4:04:d6:b3:
         e4:97:94:02:4d:f7:ca:f0:68:3f:71:6d:23:00:3b:36:57:3b:
         a9:5c:da:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:58 2025 by rpki-client